Static task
static1
Behavioral task
behavioral1
Sample
36d28e58c7a223fea6c36deb40cd4c64.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
36d28e58c7a223fea6c36deb40cd4c64.exe
Resource
win10v2004-20231215-en
General
-
Target
36d28e58c7a223fea6c36deb40cd4c64.exe
-
Size
460KB
-
MD5
36d28e58c7a223fea6c36deb40cd4c64
-
SHA1
48209bf6850b9de9aa7d936fe6f5ef734efedc57
-
SHA256
89de46fc35e62873b22014eae31607256a70c0f0f37c0c6a5bd8f23a4c01b047
-
SHA512
bf4e73690f245792e2bba27f704cd668038188021d96f414d6c102d682298013d5e0d3a2d43a16740a80147159ef974eb4c150dfe38d0558192b990876ca9012
-
SSDEEP
12288:fXBp+gczyhNSvRbBQHR4qz91hI0zSaNsvz+yuWDVId21NaI+E8tyvXDc+P9DncS7:vyB9DxF/EMgmFqC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36d28e58c7a223fea6c36deb40cd4c64.exe
Files
-
36d28e58c7a223fea6c36deb40cd4c64.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 457KB - Virtual size: 457KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ